Convert Ed25519 to RSA fingerprint (or how to find SSH fingerprint)

◇◆丶佛笑我妖孽 提交于 2019-12-10 10:11:37

问题


BizTalk sees thumbprint for an internal SFTP test as ssh-rsa 2048 33:88:f0:ff:63:78:a9:2b:3f:09:cb:05:81:db:59:86

WinSCP shows: ssh-ed25519 256 ff:2e:5e:33:7a:15:de:69:18:cf:82:ae:f0:4e:7b:d2 (when I click "Session", then "Server/Protocol Information")

Is it possible to convert one to the other? Is it possible to get the ssh-rsa thumbprint from WinSCP, PuTTY or some other tool?


回答1:


WinSCP uses Ed25519 host key. It's a different key, than the RSA host key used by BizTalk. You cannot convert one to another.

Also you cannot force WinSCP to use RSA hostkey. WinSCP will always use Ed25519 hostkey as that's preferred over RSA.

If you can connect with SSH terminal (e.g. PuTTY) to the server, use ssh-keygen to display a fingerprint of the RSA host key:

ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key

(this assumes common *nix server with OpenSSH)

Note that this makes sense only, if you had verified the host key, that the SSH terminal uses, upfront.

See WinSCP FAQ on Where do I get SSH host key fingerprint to authorize the server?, which covers all this.




回答2:


ssh-rsa 2048 33:88:f0:ff:63:78:a9:2b:3f:09:cb:05:81:db:59:86 

and

ssh-ed25519 256 ff:2e:5e:33:7a:15:de:69:18:cf:82:ae:f0:4e:7b:d2

Are same fingerprint types, but different key types (one is RSA and the other ED25519 -- elliptic curve). There is no way one to the other, because they are fingerprints of different keys.



来源:https://stackoverflow.com/questions/43985106/convert-ed25519-to-rsa-fingerprint-or-how-to-find-ssh-fingerprint

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!